Here's some work in progress for a more thorough guard against this vector. Still work in progress but the idea is to properly parse maketext args instead of escaping brackets, which in effect breaks some of the nicer features of Locale::Maketext.